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Top Stories 

• An Arizona man was found guilty of federal racketeering charges for his participation in an 
underweb marketplace that sold stolen information and fraud services and caused an 
estimated $50.5 million in losses. - Wired.com (See item 7 ) 

• Kaiser Permanente notified about 49,000 patients after a computer flash drive containing 
unencrypted patient personal and medical information went missing at the Anaheim Medical 
Center in California. - Los Angeles Times (See item 14 ) 

• All federal government offices in Washington, D.C. as well as city public schools were 
closed due to severe winter weather. - Associated Press (See item 16 ) 

• Princeton University in New Jersey decided to begin vaccinating nearly 6,000 students in an 
attempt to stop an outbreak of type B meningitis after 8 people there contracted the disease. - 
Associated Press (See item 19 ) 
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Energy Sector 



1. December 9, Associated Press - (Nevada) 1 injured in oil plant lire near Fallon. 
Officials are investigating a December 9 oil plant fire at the Bango refinery near Fallon 
that left one person injured. 

Source: 

http://www.lasvegassun.com/news/2013/dec/09/l-iniured-oil-plant-fire-near-fallon/ 

2. December 9, Bismarck Tribune - (North Dakota) Spill, fire reported at well sites. 
North Dakota Department of Health officials are monitoring an estimated 650-barrel 
spill of saltwater and 20-barrel spill of crude oil from a Texas-based BTA Oil Producers 
LLC well site in Bismarck December 8, that reached a small tributary of the Little 
Missouri River. State agencies were also notified of a Landtech Enterprises, LLC-owned 
saltwater well disposal fire in McKenzie County and are investigating. 

Source: 

http://bismarcktribune.com/bakken/spill-fire-reported-at-well-sites/article 909868c0-61 
26-lle3-85b5-001a4bcf887a.html 
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Chemical Industry Sector 

Nothing to report 



[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

3. December 9, Los Angeles Times - (International) Suspects arrested in heist of 
radioactive material in Mexico. Authorities in Mexico arrested six individuals 
December 8 in connection with the theft of a truck that was carrying a shipment of 
cobalt-60 to a disposal facility. The suspects were believed to have been planning to 
break down the truck and sell it for parts. 

Source: http://www.latimes.com/woiid/worldnow/la-fg-wn-mexico-radioactive-truck-ar 
rests-2013 1209,0, 182791 .story 
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Critical Manufacturing Sector 

4. December 10, U.S. Consumer Product Safety Commission - (International) Toro recalls 
TimeMaster and TurfMaster lawn mowers due to injury hazard. Toro Co., 
announced a recall of around 36,100 TimeMaster 30" and TurfMaster 30" lawn mowers 
in the U.S. and Canada due to an issue that can cause the mowers' blades to break, posing 
an injury hazard. 

Source: http://www.cpsc.gov/en/Recalls/2014/Toro-Recalls-TimeMaster-and-TurfMaste 
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r-Lawn-Mowers/ 



5. December 9, U.S. Department of Labor - (Illinois) U.S. Labor Department's OSHA 
cites Arlington Metals Corp. for 38 violations. The Occupational Safety and Health 
Administration cited Arlington Metals Corporation for 38 safety and health violations at 
its Franklin Park metal strip and coil processing facility, with proposed fines totaling 
$117,000. 

Source: https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS 
RELEASES &p id=25212 

6. December 9, U.S. Department of Labor - (Kansas) Rail Car Services faces U.S. Labor 
Department OSHA penalties of $133,000 for repeat safety, health violations at 
Kansas City, Kan., train car facility. The Occupational Safety and Health 
Administration cited rail car refurbishing facility Rail Car Services LLC with 1 1 safety 
and health violations at its Kansas City, Kansas facility, including 8 repeat violations. 
Proposed fines totaled $133,000. 

Source: https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS 
RELEASES &p id=25209 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

7. December 9, Wired.com - (International) Guilty verdict in first ever cybercrime 
RICO trial. An Arizona man was found guilty of federal racketeering charges for his 
participation in an underweb marketplace known as Carder.su that sold stolen payment 
card information, counterfeiting equipment, and online criminal services. The 
marketplace created $50.5 million in losses according to a government estimate. 

Source: http://www.wired.com/threatlevel/2013/12/rico/ 

8. December 9, Palm Springs Desert Sun- (California) 'Button-Down Bandit' suspected 
of robbing Corona bank. The December 6 robbery of a Bank of America bank branch 
in Corona was believed to be the work of a suspect known as the "Button-Down Bandit", 
a bank robber linked to four other robberies in the Coachella Valley and Orange County 
areas. 

Source: http://www.mvdesert.com/article/20 131 209/NEWS080 1/3 1 2090008/-B utton-do 
wn-Bandit-robs-Corona-bank 
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Transportation Systems Sector 



9. December 10, WSYR 9 Syracuse - (New York) State police identify driver in fiery 
thruway crash. An accident involving a vehicle that struck the 1-48 1 bridge support on 
the 1-90 Thruway and burst into flames seriously injured the driver of the car and closed 
one lane of a portion of the thruway. 

Source: 

http://www.9wsvr.com/news/local/storv/State-Police-identifv-driver-in-fierv-Thruway/ 

LCmOzZF28UOJK952QalSdA.cspx 

10. December 10, Kalispell Daily Inter Lake - (Montana) Two injured when plane veers 
off runway. Two people were injured December 9 after a twin-engine aircraft with five 
people onboard made a hard landing off the runway at the Glacier Park International 
Airport in Montana, prompting the closure of the runway and the airport for about 1 hour. 
Source: 

http://www.dailyinterlake.com/news/local montana/article 8e0c4908-60fb-l Ie3-9c6c- 
0019bb2963f4.html 

11. December 10, WMAR-TV 2 Baltimore - (Maryland) 2 dead after car hit by occupied 
train in Baltimore. An accident involving a vehicle that was hit by a train in Baltimore 
killed two people and shut down the MARC Camden Line for an undisclosed amount of 
time December 10. 

Source: 

http://www.abc2news.com/dpp/news/region/baltimore city/car-hit-by-train-in-baltimor 
e 

For another story, see item 33 
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Food and Agriculture Sector 

12. December 9, Food Safety News - (National) CO firm recalls meat and poultry 
products produced under ‘insanitary conditions.’ The U.S. Department of 
Agriculture’s Food Safety and Inspection Service (FSIS) announced December 9 the 
recall of approximately 90,000 pounds of various meat and poultry products produced by 
Yauk’s Specialty Meats of Windsor, Colorado, after a FSIS food safety assessment 
December 5 found unsanitary conditions, including rodent activity in the production, 
storage, and retail areas at the plant. 

Source: 

http://www.foodsafetvnews.com/2013/12/colorado-firm-recalls-meat-and-poultrv-prod 
ucts-produced-under- insanitary-conditions/ 
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Water and Wastewater Systems Sector 



13. December 9, Inland Valley Daily Bulletin - (California) Chino Valley Unified 
continues to test drinking water for lead contamination. Public health officials 
reported December 6 that lead in drinking water was discovered at some drinking water 
fixtures in 12 of 35 school sites in the Chino Valley unified school district. Officials 
identified hot spots and are working to eliminate them. 

Source: 

http://www.sbsun.com/environment-and-nature/20131209/chino-valley-unified-continu 
es-to-test-drinking-water-for- lead-contamination 

For another story, see item 2 
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Healthcare and Public Health Sector 

14. December 10, Los Angeles Times - (California) Kaiser Permanente reports privacy 
breach to 49,000 patients. Kaiser Permanente notified about 49,000 patients after a 
computer flash drive containing unencrypted patient personal and medical information 
without password protection was reported missing September 25 from the Anaheim 
Medical Center nuclear medicine department. 

Source: 

http://www.latimes.com/business/monev/la-fi-mo-kaiser-privacv-breach-2013 1209,0,4 
000091 .story 



15. December 9, Richmond Times-Dispatch - (Virginia) Elderly apartment complex 
evacuated for fire. Authorities are investigating a December 9 fire at the Charnwood 
Forest retirement home in south Richmond that sent two people to the hospital and 
caused a nearly 3-hour evacuation. 

Source: 

http://www.timesdispatch.com/news/local/citv-of-richmond/firefighters-respond-to-bla 
ze-at-south-richmond-apartment-complex/article 2cd4bc4c-6132-lle3-bd5e-001a4bcf 
6878.html 

For another story, see item 19 



[ Return to top ] 



Government Facilities Sector 



16. December 10, Associated Press - (Washington, D.C.) DC government, schools closed 
for winter weather. All federal government offices in Washington, D.C. as well as city 
public schools and the University of the District of Columbia were closed December 10 
due to severe winter weather in the region. 

Source: 

http://www.washingtonpost.com/local/dc-government-schools-closed-for-winter-weath 
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er/2013/12/10/20e595f8-6189-lle3-a7b4-4a75ebc432ab story.html 



17. December 10, Newark Star-Ledger - (New Jersey) N.J. school closings called for Dec. 
10 midday snow storm. Several major New Jersey school districts closed December 10 
ahead of a winter storm after forecasters predicted significant amounts of snow. 

Source: 

http://www.ni.com/news/index.ssf/2013/12/nj school closings for midday snow stor 
m.html 

18. December 10, City of Portland - (Oregon) City hall and Portland Building remain 
closed Tuesday, Dec. 10. The Portland Building and Portland city hall remained closed 
December 10 due to a power outage in the area. Power was expected to be restored by 
December 11. 

Source: http://www.portlandonline.com/ 

19. December 9, Associated Press - (New Jersey) Princeton starts mass meningitis B 
vaccinations. Princeton University in New Jersey decided to begin vaccinating nearly 
6,000 students in an attempt to stop an outbreak of type B meningitis after 7 students and 
1 student visitor have contracted the disease since March. 

Source: http://news.msn.com/us/princeton-starts-mass-meningitis-b-vaccinations 

20. December 9, Washington Post - (Maryland; Virginia; Washington, D.C.) School 
closings, accidents, power outages after winter storm; round two to come. Dozens of 
school districts in Maryland and Virginia were closed December 9 and federal 
government offices in Washington, D.C. delayed opening after a winter storm caused 
sleet and freezing rain. 

Source: 

http://www.washingtonpost.com/local/some-school-closings-accidents-power-outages- 
after- winter- storm/201 3/1 2/09/d4b26f5c-60bc-lle3-8beb-3f9a9942850f story.html 

21. December 9, WPVI 6 Philadelphia - (New Jersey) 2 kids, 3 others injured in Toms 
River school bus crash. An accident between a car and a Toms River Intermediate 
North School bus in Ocean County left two students and three others injured December 
9. 

Source: http://abclocal.go.com/wpvi/storv?section=news/local&id=9354004 

22. December 9, KAKE 10 Wichita - (Kansas) 4 kids, 2 adults hurt in SW Kansas school 
bus crash. A December 9 accident involving a truck and a school bus near Garden City 
sent four children and two adults to an area hospital with injuries. 

Source: 

http://www.kake.com/home/headlines/4-kids-2-adults-hurt-in-SW-Kansas-school-bus-c 

rash-235166321.html 

23. December 9, Springfield State Journal-Register - (Illinois) Laptop containing SIU 
patient data stolen from doctor’s office. Southern Illinois University (SIU) School of 
Medicine notified 1,891 SIU Healthcare patients that a laptop computer containing their 
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personal and medical information was stolen in September or October from a doctor’s 
private office at Memorial Medical Center in Springfield. After confirming the laptop 
was missing, SIU tightened their policies on patient data stored on doctors’ mobile 
devices. 

Source: http ://w w w. si -r .com/article/20 131 209/NEW S/131 209546/ 

For another story, see item 13 
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Emergency Services Sector 

24. December 10, Carroll County Times - (Maryland) Ex- Winfield fire company 

treasurer charged with embezzlement. A former Winfield fire company treasurer was 
arrested and charged in connection with stealing more than $220,000 from the 
organization by using a supposedly closed bank account to funnel money through 
insurance billings, money transfers, and deposits from February 2008 to December 2012. 
Source: 

http://www.carrollcountvtimes.com/news/crime/former-fire-company-treasurer-charged 
-with-embezzlement/article 10d92289-f6c5-59bd-83e5-603e81cl296b.html 
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Information Technology Sector 

25. December 10, Softpedia - (International) MouaBad malware allows cybercriminals to 
make phone calls. Researchers at Lookout analyzed a new version of the MouaBad 
Android malware, dubbed MouaBad.p, which can be used to make calls and send 
messages without a user's input. The new variant only affects Android versions before 
Android 3.1. 

Source: 

http://news.softpedia.com/news/MouaBad-Malware-Allows-Cybercriminals-to-Make-P 

hone-Calls-407819.shtml 

26. December 10, V3.co.uk - (International) Chinese hackers used Syrian crisis to phish 
European governments before G20 Summit. Researchers at FireEye detected a 
cyberespionage campaign that targeted foreign ministries of several undisclosed 
European governments prior to the September G20 Summit dubbed Operation 
Ke3chang. The campaign used phishing emails and three types of malware to infiltrate 
systems and used servers that appeared to be located in China. 

Source: http://www.v3.co.uk/v3-uk/news/2318148/chinese-hackers-used-svrian-crisis-to 

-phish-european-governments-before-g20-summit 

27. December 9, Computerworld - (International) Other browser makers follow Google's 
lead, revoke rogue certificates. Google, Mozilla, Microsoft, and Opera Software 
revoked rogue digital certificates that were mistakenly issued by the French Network and 
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Information Security Agency (ANSSI) and signed by the France's treasury department. 
Source: http://www.computerworld.com/s/article/9244645/Other browser makers folio 
w Google s lead revoke rogue certificates 

28. December 9, IDG News Service - (International) Data-stealing malware pretends to be 
Microsoft IIS server module. A piece of malware was discovered by researchers at 
Trustwave's SpiderLabs that disguises itself as a module for Microsoft Internet 
Information Service (IIS) software and collects data entered into Web-based forms. The 
malware, dubbed ISN, is a malicious dynamic link library (DLL) which is currently 
undetectable by most anti-virus products. 

Source: http://www.networkworld.com/news/201 3/12 101 3-data-stealing-malware-prete 
nds-to-be-276766.html 



29. December 9, Albany Times-Union - (New York) Bomb threat jolts GlobalFoundries. 
An employee allegedly left a bomb threat at the GlobalFoundries Fab 8 site in Malta, 
New York, December 9, causing 3,000 construction employees to be evacuated from the 
site and construction operations to be suspended for the day. 

Source: http://www.timesunion.com/local/article/Arrest-made-in-GlobalFoundries-bom 

b-threat-5048095.php 

For another story, see item 7 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and Analysis 
Center) Web site: http://www.it-isac.org 
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Communications Sector 

See item 25 
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Commercial Facilities Sector 

30. December 9, WMAR-TV 2 Baltimore - (Maryland) Shoplifter steals security guard’s 
gun, fires shots in Weis. An altercation between a shoplifting suspect and a security 
guard at a Weis grocery store in Laurel resulted in the suspect stealing the guard's 
weapon and firing four rounds before leaving the market December 8. No injuries were 
reported and the suspect was still at large. 

Source: 

http://www.abc2news.com/dpp/news/crime checker/anne arundel crime/shoplifter- ste 
als - securit y- gu ards - gun-fires- shots -in- weis 
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31. December 9, U.S. Department of Labor - (Alabama) Emerald Coast RV Center in 
Alabama cited by US Department of Labor’s OSHA for serious safety violations. 
Emerald Coast RV Center LLC of Robertsdale was cited by the Occupational Safety and 
Health Administration with nine serious safety violations at its recreational vehicle sales 
and service facility in Robertsdale, with proposed penalties totaling $41,000. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25215 

32. December 9, KCAL 9 Los Angeles - (California) 9 Hospitalized after chemical spill in 
Monrovia. A chemical spill at an air conditioning company in Monrovia, California, 
produced a toxic vapor that caused its workers and those at a neighboring business to be 
exposed to the fumes through a ventilation system. No evacuations were ordered but 9 
people were sent to the hospital and 45 others were treated at the scene. 

Source: 

http://losangeles.cbslocal.com/2013/12/09/chemical-spill-sickens-150-people-in-monro 
via / 
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Dams Sector 

33. December 9, Buffalo News - (New York) Beavers blamed for drainage woes in Silver 
Creek. Local officials reported December 9 that a large beaver dam at Sunset Bay in 
Silver Creek, New York, has created a storm water drainage blockage that could cause 
flooding in a residential community. The dam is located on private property owned by a 
railroad and could also be potentially hazardous to CSX and Norfolk Southern rail lines 
running through the area. 

Source: 

http://www.buffalonews.com/citv-region/chautauqua-county/beavers-blamed-for-drain 
age-woes-in-silver-creek-20 131 209 

34. December 9, Fargo-Moorhead Forum - (North Dakota) Floodwall Fargo approves 
new 2nd Street alignment along Red River. The City Commission of Fargo approved 
a plan to shift Second Street in the city in order to build a $53 million permanent flood 
wall along the Red River. The road realignment will also allow for a fully enclosed lift 
station to be built, along with other flood control measures. 

Source: http://www.inforum.com/event/article/id/420675/ 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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